CLAIMS 




1 . (Amended) A method for detecting fraua when facilitating a payment 
transaction over a global wide area network, the method comprising: 

receiving sale information pertaining to a/purchase of a product from a seller; 
receiving payment information from a l/uyer; 

performing automated analysis of transaction information including the sale 
information and the payment information t$? detect whether the transaction 
information indicates fraud; 

if the automated analysis does nfit detect fraud, instructing the seller to send 
the product to the buyer; and 

if the automated analysis detects fraud, communicating an enhanced 
transaction information to a humay for manual fraud analysis. 



2. (Unamended) The method of /Claim 1 wherein the sale information is received 
from a seller, and the method further comprises: 

communicating an invoice to a buyer. 

3. (Unamended) The methocyof Claim 1 wherein the sale information is received 
from the buyer, and the method further comprises: 

communicating a sale confirmation request to the seller. 

4. (Unamended) The method of Claim 1 further comprising: 
performing simple screening of the transaction information. 



5. (Unamended) The method of Claim 4 wherein performing simple screening 
comprises at least one of: 

determining whether a financial account specified as part of the payment information 
is on a list of known fraudulent financial account numbers; 
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determining whether the name of the buye/ or the name of the seller is on a list of 
known fraudulent users; 

determining whether a shipping addre^ specified as part of the payment information 
is on a list of known fraudulent addresses; 

determining whether a billing address specified as part of the payment information is 
on a list of known fraudulent addresses; 

determining whether a billing address specified as part of the payment information is 
on a list of known fraudulent addresses^ 

determining whether an email Address of the buyer or the seller is on a list of known 
fraudulent email addresses; and 

determining whether an Internet protocol (IP) address of the buyer or the seller is on a 
list of known fraudulent IP addresses. 

6. (Unamended) The method of Claim 1 further comprising: 

seeking approval from a financial institution based on the payment information. 

7. (Unamended) The method of Claim 6 wherein seeking approval comprises: 
sending a request for/approval that comprises at least an account information 

extracted from the payment/ information and an amount information to a financial institution; 

receiving from the financial institution a response to the request; 
rejecting the payment transaction or continuing with the payment transaction responsive to 
the response. 



8. (Unamended) The method of Claim 1 wherein performing automated analysis 
comprises: 



performing ru 



e-based analyses. 



9. (Unamended) The method of Claim 8 wherein performing rule-based analyses 
comprises: 
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applying a plurality of rules to the transaction imormation such that a score for the 
payment transaction is incremented when one of the rules is violated. 

10. (Unamended) The method of Claim 9 vf herein performing rule-based analyses 
further comprises: 

creating the enhanced transaction informatibn if the score exceeds a predefined 
threshold such that the enhanced transaction inforjnation comprises a tracking number, the 
score, and a violated rule information. 

1 1 . (Unamended) The method of Claim p wherein applying comprises: 
incrementing the score responsive to a numeric value assigned to the rule violated. 

12. (Unamended) The method of Claim 9 wherein the plurality of rules comprise at 
least one of a plurality of suspect data rules and a plurality of velocity rules. 



13. (Unamended) The method of Clafim 12 wherein the plurality of suspect data 
rules comprise at least some of: 

comparison of a shipping address witfi a directory of known real addresses; 

comparison of a shipping address with a list of addresses implicated in prior possibly 
fraudulent transactions; 

comparison of a billing address witl a directory of known real addresses; 

comparison of a billing address with a list of addresses implicated in prior possibly 
fraudulent transactions. 



14. (Unamended) The method of Claim 12 wherein the plurality of velocity rules 
comprise at least some of: 

of transactions involving the seller exceeds a first 
;ime period; 

determining whether a second num :>er of transactions involving the buyer exceeds a 
second predefined threshold for a second p redefined time period; 
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determining whether a first number 
predefined threshold for a first predefined 



determining whether a first total dollar amount fon a first plurality of transactions 
involving the buyer exceeds a third predefined threshold/for a third predefined time period; 

determining whether a second total dollar amount for a second plurality of 
transactions involving the seller exceeds a fourth predefined threshold for a fourth predefined 
time period; 

determining whether a third total dollar amouiit for a specified financial account 
exceeds a fifth predefined threshold for a fifth predefined time period; 

determining whether a third number of transactions involving the specified financial 
account exceeds a sixth predefined threshold for a sixth predefined time period. 



15. (Unamended) The method of Claim 1£ wherein the plurality of velocity rules 
comprise at least some of: 

determining whether a financial account specified as part of the payment information 
has exceeded a predetermined acceptable number] of times used over a predetermined period 
of time; 

determining whether a financial account Specified as part of the payment information 
has exceeded a predetermined acceptable number of times used over a predetermined number 



of transactions with the seller; 

determining whether a financial account 



specified as part of the payment information 



has exceeded a predetermined acceptable numb sr of times used over a predetermined number 
of transactions with a payment facilitator syster i. 

16. (Unamended) The method of Claim 1 wherein communicating an enhanced 



transaction information comprises sending an 
human fraud investigators. 



email message to at least one of a plurality of 



17. (Unamended) The method of Claim 1 further comprising: 
if the analyzing indicates fraud, notifying the buyer and/or a seller that the payment 
transaction is on hold pending the outcome of a fraud investigation. 
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18. (Unamended) The method of Claim 17 wherein notifying comprises: 
sending an email message to the ouyer and/or the seller. 



: jfuye 




19. (Amended) A system comprising: 

a first computer supporting communications over a wide area network by a 

a second computer supporting communications over the wide are network by 



a third computer supporting communications over the wide are network and 
executing software that facilitates a payment transaction between the buyer and the seller 
such that the third computer 

analyzes the payment transaction for fraud by applying a plurality of 
rules and incrementing a score for the payment transaction for each of the 
plurality of rales that is violated, 

if the score does not exceed a predefined threshold, instructs the seller 
to send a purchased product to the buyer, and 

if the^score exceeds a predefined threshold, communicates an 
information about the payment transaction to a human fraud investigator. 



20. (Unamended) The system of Qlaim 
a fourth computer capable of comnjunications 
the human fraud investigator to communicAte 



19 further comprising: 

with the third computer and allowing 
with the third computer. 



21. (Unamended) The system of Claim 20 wherein the third computer is coupled to 
the fourth computer via a dedicated communications line. 



22. (Unamended) The system of CI Aim 20 wherein the third computer communicates 
with the fourth computer over the wide area network. 



23. (Unamended) The system of Claiml 9 further comprising: 
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a fifth computer capable of communications with the third computer and responding 
on behalf of a financial institution to a request for authorization of the payment transaction 
initiated by the software executing on the th rd computer. 

24. (Unamended) The system of CI aim 23 wherein the third computer is coupled to 
the fifth computer via a dedicated communi :ations line. 

25. (Unamended) The system of Claim 23 wherein the third computer communicates 
with the fifth computer over the wide area r etwork. 



26. (Unamended) The system of C 



Internet. 



aim 19 wherein the wide area network is the 




27. (Amended) A machine readable medium having stored thereon instructions 
which when executed by a processor cause the machineao perform operations comprising: 
receiving sale information pertaining to a purchase ol a product from a seller; 
receiving payment information from a buyeir; 
performing automated analysis of transaction information including the sale 
information and the payment information to ^etect whether the transaction 
information indicates fraud; 

if the automated analysis does xxft detect fraud, instructing the seller to send 
the product to the buyer; and 

if the automated analysis detects fraud, communicating an enhanced transaction 
information to a human for manual fraud analysis. 



28. (Unamended) The machine readable medium of Claim 27 wherein the 
instructions cause the machine to perform operations further comprising: 
performing simple screening of tne transaction information. 



003801. P034 



7 



t 



29. (Unamended) The machine readable medium of Claim 28 wherein performing 
simple screening comprises at least one of: / 

determining whether a financial account specified as part of the payment information 
is on a list of known fraudulent financial account numbers; 

determining whether the name of me buyer or the name of the seller is on a list of 
known fraudulent users; / 

determining whether a shipping address specified as part of the payment information 
is on a list of known fraudulent addresses; 

determining whether a billing address specified as part of the payment information is 
on a list of known fraudulent addresses; 

determining whether a billipg address specified as part of the payment information is 
on a list of known fraudulent addresses; 

determining whether an email address of the buyer or the seller is on a list of known 
fraudulent email addresses; and/ 

determining whether am Internet protocol (IP) address of the buyer or the seller is on a 
list of known fraudulent IP aadresses. 

30. (Unamended) The machine readable medium of Claim 27 wherein the 
instructions cause the machine to perform operations further comprising: 

seeking approval from a financial institution based on the payment information. 

3 1 . (Unamended) The machine readable medium of Claim 30 wherein seeking 
approval comprises: / 

sending a request for approval that comprises at least an account information 
extracted from the payment information and an amount information to a financial institution; 

receiving frrfm the financial institution a response to the request; 
rejecting the payment transaction or continuing with the payment transaction responsive to 
the response. / 
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32. (Unamended) The machine readable n/edium of Claim 27 wherein performing 
automated analysis comprises: 

performing rule-based analyses. 

33. (Unamended) The machine readabljb medium of Claim 32 wherein performing 
rule-based analyses comprises: 

applying a plurality of rules to the transaction information such that a score for the 
payment transaction is incremented when one of the rules is violated. 

34. (Unamended) The machine readaple medium of Claim 33 wherein performing 
rule-based analyses further comprises: 

creating the enhanced transaction information if the score exceeds a predefined 
threshold such that the enhanced transaction/information comprises a tracking number, the 
score, and a violated rule information. 

35. (Unamended) The machine readable medium of Claim 33 wherein applying 
comprises: 

incrementing the score responsive tjb a numeric value assigned to the rule violated. 



36. (Unamended) The machines 
plurality of rules comprise at least one of 
of velocity rules. 



adable medium of Claim 33 wherein the 

i plurality of suspect data rules and a plurality 



communicating an enhanced transaction 



37. (Unamended) The machine readable medium of Claim 27 wherein 



nformation comprises sending an email 



message to at least one of a plurality of human fraud investigators 



38. (Unamended) The machine 



■eadable medium of Claim 27 wherein the 



instructions cause the machine to perforr| operations further comprising: 
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if the analyzing indicates /ft ; 
payment transaction is on hold p/er j 



Jaud, notifying the buyer and/or a seller that the 
ding the outcome of a fraud investigation. 



machine readable medium of Claim 38 wherein notifying 



39. (Unamended) The 
comprises: 

sending an email messige to the buyer and/or the seller. 
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